Privacy Policy | Plus Menu

Personal Data Protection and Processing Information Text

Data Controller: Uğur Çelik 7BİTBİTES E-Commerce and Software (Hereinafter referred to as “plusmenu.co” or the “Company”.)

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), as plusmenu.co, we attach the utmost importance to the security and privacy of your personal data. As the Data Controller, we process the personal data of business owners (Members/Customers) who benefit from our services and visitors (End Users) who access menus by scanning QR codes in restaurants, in accordance with the law and honesty rules within the limits specified below.

This text has been prepared to inform you about the purposes for which your personal data is processed, to whom it is transferred, and your legal rights in this regard.

1. Your Processed Personal Data

Within the scope of your use of the plusmenu.co platform, depending on your user type (Business Owner or End User), your following data is processed:

Identity and Contact Data: Name, surname, e-mail address, phone number.
Finance and Accounting Data: Billing information, tax number, company address information (For business owners).
Transaction Security and Digital Trace Data: Log records, IP addresses, cookie information, device information used to access the platform (Operating system, browser type, etc.).
Menu Content You Upload: Menu files (PDF, images), business name, logo and similar visual materials you upload to the platform or to our free menu converter, together with the menu text produced from them. Where such a file happens to contain personal data (for example a chef’s name or a contact telephone number printed on the menu), that data is processed within this scope as well.

2. Purposes and Legal Reasons for Processing Personal Data

Your collected personal data is processed based on the legal grounds of “It is directly related to the establishment or performance of a contract”, “It is mandatory for the data controller to fulfill its legal obligation” and “Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject” specified in Article 5 of the KVKK, for the following purposes:

Providing the plusmenu.co SaaS (Software as a Service) platform, creating membership registrations and ensuring the uninterrupted operation of the system,
Technically delivering the menu viewing service to end users and ensuring device compatibility,
Carrying out financial processes, billing, and payment transactions,
Executing information security processes, detecting possible cyber-attacks, and keeping log records in accordance with legal periods (Law No. 5651 requirements),
Increasing service quality, fixing technical errors, and improving user experience,
Responding to requests that may come from legal authorities.

3. Collection Method of Personal Data

Your personal data is collected electronically, fully or partially automatically, through our website, mobile site, membership forms, digital transfers during the QR code scanning process, and cookies.

4. Transfer of Personal Data (Domestic and International)

Your personal data is shared with third parties in accordance with legal regulations and only to the extent necessary to achieve the purposes stated above:

International Transfer: The plusmenu.co infrastructure is hosted on foreign-based cloud server services such as Hetzner Cloud, which provide security at international standards, in order for the system to run quickly and securely. Therefore, your data entered into the system is stored on secure servers abroad.
Image Storage: Visual files you upload (logos, banners, product images) are stored on the Cloudflare R2 object storage service, whose servers are located abroad.
Artificial Intelligence Services (International Transfer): When you use the AI-assisted menu import feature or our free “PDF to QR Menu” converter, the menu file you upload (PDF or image) and its text content are transmitted to OpenAI (United States) in order for the menu structure to be extracted and, where you request it, for menu texts to be translated. This transfer takes place on the basis of your explicit consent, is limited to the menu content you have uploaded yourself, and does not include your identity, contact or payment data. The uploaded file is not stored on our servers after the extraction process is complete.
Domestic Transfer: It may be shared with payment infrastructure providers (e.g., PayTR, etc.) to carry out financial processes and online payment transactions, with our financial advisors for accounting processes, and with authorized public institutions and organizations within the scope of legal obligations in case of a legal dispute.

5. Your Rights Under KVKK Article 11

As a data subject, you have the following rights under Article 11 of the KVKK:

To learn whether your personal data is processed, and if so, to request information regarding this,
To learn the purpose of processing and whether they are used in accordance with their purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
To request the correction of your personal data if it is incomplete or incorrectly processed,
To request the deletion or destruction of your data within the framework of the conditions stipulated in Article 7 of the KVKK,
To request that the correction and deletion processes above be notified to the 3rd parties to whom it was transferred,
To object to the occurrence of a result against you by exclusively analyzing it through automatic systems,
To request compensation for the damage if you suffer damage due to unlawful processing of the law.

6. Contact and Application

You can convey your requests regarding the exercise of your rights within the scope of KVKK to our Company by sending an e-mail to info@plusmenu.co via your e-mail address registered in our system. Depending on its nature, your requests will be concluded free of charge as soon as possible and within thirty (30) days at the latest.